Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa
File: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (raw, json)
Hash identifier: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=
Subject key identifier: 1B:9C:D2:2E:C9:C8:07:54:DF:FF:77:50:A9:18:C5:FE:AF:4E:53:8E
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 019422FC296CD69F76D2EE3422C8DCC31802
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31493
IP address blocks: 194.33.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:29:6c:d6:9f:76:d2:ee:34:22:c8:dc:c3:18:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b9cd22ec9c80754dfff7750a918c5feaf4e538e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:ac:47:6f:63:2a:0a:d6:8a:6c:98:fc:df:
ba:df:00:aa:b2:c0:ca:be:da:77:d7:17:79:ce:02:
77:39:9d:83:fa:cd:36:74:53:8d:c1:44:3b:e0:cd:
7b:92:39:9b:77:b6:13:91:44:48:93:e3:42:69:0a:
d8:68:5c:4d:69:48:9d:e2:b4:a6:23:ab:1b:ae:ff:
7c:ff:41:66:bc:d8:91:43:d4:cc:78:e1:b3:eb:50:
57:70:96:62:1e:eb:03:72:fe:47:ba:8e:3a:07:1b:
8b:60:8e:84:be:dd:23:81:c3:82:21:92:22:16:16:
46:1c:a2:d3:8d:8b:17:08:44:d7:35:f6:bb:80:f5:
ba:ff:31:fa:f9:b4:62:b5:13:25:e7:d5:7e:ee:c4:
70:cc:9c:d2:10:9d:f9:bb:57:58:d1:01:a4:78:56:
25:40:85:f0:78:aa:82:78:f5:b0:30:51:dd:a1:39:
fe:a5:dc:63:94:e6:64:ce:6c:1a:74:b5:48:3b:6f:
b9:32:5b:c3:20:a7:57:e9:4c:ff:11:b0:c1:88:5a:
fb:4b:14:46:ed:e9:19:78:03:51:c8:bb:92:15:cb:
03:f4:0e:0e:65:16:d5:d9:13:96:b6:37:73:25:ec:
4d:73:a8:8b:0d:e3:03:39:62:19:50:c2:05:b2:e3:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9C:D2:2E:C9:C8:07:54:DF:FF:77:50:A9:18:C5:FE:AF:4E:53:8E
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
53:78:4a:df:8d:98:10:24:ef:4e:2e:72:67:4f:b2:aa:f9:d1:
46:3f:ae:d7:96:6f:54:a3:66:45:d1:6f:76:ce:e6:d4:f0:9a:
b2:16:d0:a5:a2:17:b2:79:bd:e4:f0:c5:89:14:de:8c:95:ae:
c1:98:e0:0e:b1:d5:33:85:79:b2:21:ec:63:2f:c3:a2:c7:c1:
ba:cf:d2:95:3c:3d:24:89:1d:ce:85:9b:34:e9:c3:ff:74:ea:
e1:38:d9:d6:e3:a5:72:98:30:dc:b2:46:48:d3:f8:00:ae:67:
6b:c2:1d:13:3a:1f:5b:46:c8:74:92:47:0c:34:72:74:8f:a8:
83:dd:1e:b8:93:fb:9e:6e:ea:67:42:a7:4b:5e:f2:85:61:c3:
da:47:b8:65:37:eb:cb:82:87:f8:55:7f:fc:3f:69:fa:46:15:
2a:fc:90:23:29:24:4c:bd:22:24:18:4c:76:ac:3f:bf:ee:7b:
80:a4:86:c3:05:88:75:41:57:7e:ba:77:62:f3:8e:ac:09:5d:
12:e6:65:6d:18:77:b7:b9:11:53:15:fe:ee:25:b1:b0:dc:e6:
a0:39:03:57:0c:e7:ff:ad:03:ed:09:34:23:a2:30:89:d0:b5:
22:12:d9:39:8d:33:73:08:ef:b9:7e:0b:40:61:a0:4e:92:cc:
5d:03:e3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:31:33 2025 by rpki-client